Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28481.roa
File:                     AS28481.roa (raw, json)
Hash identifier:          KginVodaMYvaW5pQzgda/bAzkRDpQWSZx72Dbrbm/c4=
Subject key identifier:   A5:28:C2:C9:F6:41:43:40:98:E3:32:74:31:E8:95:EC:B0:8F:84:26
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       034697F508CF2FA71D3DE45D68F0BE785EA2382B
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28481.roa
Signing time:             Fri 30 Aug 2024 19:20:00 +0000
ROA not before:           Fri 30 Aug 2024 19:15:00 +0000
ROA not after:            Fri 29 Aug 2025 19:20:00 +0000
asID:                     28481
IP address blocks:        177.225.216.0/21 maxlen: 21
                          187.243.116.0/24 maxlen: 24
                          200.92.220.0/22 maxlen: 22
                          200.92.232.0/22 maxlen: 22
                          200.94.228.0/23 maxlen: 23
                          200.94.230.0/23 maxlen: 23
                          200.94.232.0/23 maxlen: 23
                          200.94.234.0/23 maxlen: 23
                          200.94.236.0/23 maxlen: 24
                          201.132.132.0/22 maxlen: 23
                          201.132.136.0/21 maxlen: 22
                          201.132.144.0/21 maxlen: 22
                          201.132.156.0/22 maxlen: 23
                          201.164.48.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:46:97:f5:08:cf:2f:a7:1d:3d:e4:5d:68:f0:be:78:5e:a2:38:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Aug 30 19:15:00 2024 GMT
            Not After : Aug 29 19:20:00 2025 GMT
        Subject: CN=A528C2C9F641434098E3327431E895ECB08F8426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5d:c4:ce:3e:16:6d:9b:1a:59:a8:31:ed:7c:
                    29:c0:54:72:ee:9a:f5:96:ae:03:f6:50:d8:9f:be:
                    2e:85:a7:d3:2e:de:26:e5:29:29:62:e6:3b:9e:a3:
                    2b:87:76:b5:08:8c:3f:b8:f9:f9:28:ec:05:3f:a8:
                    04:c0:8f:d3:e7:34:0a:21:d6:cf:f3:67:3c:f8:ce:
                    9c:24:8e:95:ce:f9:af:31:51:ac:f5:07:4d:a2:a3:
                    3d:98:7b:0d:ed:a8:73:56:79:b1:5a:07:82:39:4a:
                    ac:69:d3:bc:f8:01:f6:5d:9a:f6:12:40:1e:04:7d:
                    6c:b8:19:9c:40:c6:52:75:c8:08:72:b9:64:cb:48:
                    24:40:7d:c4:68:0e:f1:4a:52:b0:0f:2e:c0:f6:15:
                    8b:b3:f6:a6:e3:e1:a2:09:71:07:2f:84:de:2c:e3:
                    8e:3c:c1:5d:1a:3d:6a:4d:6d:6d:b2:ef:3a:ae:b1:
                    a0:38:a9:e7:ee:3c:79:e3:cc:19:6d:c5:8a:93:a6:
                    62:21:6d:fb:c7:e2:0a:a8:88:88:ec:5e:45:61:f6:
                    6b:eb:65:d1:95:a6:5f:45:7a:37:76:fa:b4:7c:fd:
                    1c:95:29:23:73:c6:56:f2:e8:58:cc:54:5c:3d:70:
                    ea:cd:8d:4a:bb:fa:9c:36:b5:75:78:fa:2d:dc:21:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:28:C2:C9:F6:41:43:40:98:E3:32:74:31:E8:95:EC:B0:8F:84:26
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28481.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.225.216.0/21
                  187.243.116.0/24
                  200.92.220.0/22
                  200.92.232.0/22
                  200.94.228.0-200.94.237.255
                  201.132.132.0-201.132.151.255
                  201.132.156.0/22
                  201.164.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:66:fc:49:5c:e1:d3:90:fe:11:b3:bd:9b:64:49:c6:14:
         78:73:d1:41:4f:c7:71:19:d4:97:65:65:dd:7c:5d:9b:ce:51:
         df:da:70:3a:88:0d:65:28:43:c7:a9:c1:f4:93:f1:ca:4d:fc:
         34:59:b4:92:ee:6b:34:4c:c6:7b:75:cc:a0:53:bc:a8:ef:6d:
         b6:a0:ef:46:97:a0:28:e8:68:45:b8:e7:c3:9b:bf:74:4b:08:
         5c:95:eb:c5:40:26:cc:52:eb:7f:b7:30:2a:14:00:0b:60:6f:
         d8:0b:74:57:c1:cc:ad:6b:72:21:b3:a8:f7:a4:ea:f2:80:44:
         86:13:2f:e8:e1:5c:42:55:11:c3:45:20:97:ce:84:17:a3:1b:
         fb:9d:f6:98:85:81:3d:24:4c:9a:39:25:57:ab:aa:2c:93:92:
         06:12:77:10:98:54:1f:93:df:49:4b:8a:ca:7f:ef:03:9a:ee:
         f5:df:b5:41:24:9c:12:e5:04:fb:a4:fc:f0:2b:46:ca:2e:ab:
         8f:55:d1:d4:bb:da:04:1b:70:c2:7a:53:53:29:a4:80:71:c3:
         fc:34:31:da:93:7b:fc:4a:1c:8c:92:21:40:21:8b:49:7d:a6:
         40:d4:c9:40:73:62:0b:6b:9a:7f:39:b7:6b:66:83:75:83:5d:
         5e:93:ec:d3
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUA0aX9QjPL6cdPeRdaPC+eF6iOCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA4MzAxOTE1MDBaFw0yNTA4MjkxOTIwMDBaMDMxMTAvBgNV
BAMTKEE1MjhDMkM5RjY0MTQzNDA5OEUzMzI3NDMxRTg5NUVDQjA4Rjg0MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZXcTOPhZtmxpZqDHtfCnAVHLu
mvWWrgP2UNifvi6Fp9Mu3iblKSli5jueoyuHdrUIjD+4+fko7AU/qATAj9PnNAoh
1s/zZzz4zpwkjpXO+a8xUaz1B02ioz2Yew3tqHNWebFaB4I5Sqxp07z4AfZdmvYS
QB4EfWy4GZxAxlJ1yAhyuWTLSCRAfcRoDvFKUrAPLsD2FYuz9qbj4aIJcQcvhN4s
4448wV0aPWpNbW2y7zqusaA4qefuPHnjzBltxYqTpmIhbfvH4gqoiIjsXkVh9mvr
ZdGVpl9Fejd2+rR8/RyVKSNzxlby6FjMVFw9cOrNjUq7+pw2tXV4+i3cIcLnAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQUpSjCyfZBQ0CY4zJ0MeiV7LCPhCYwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZCNjMxNzREQjBD
N0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQVMyODQ4MS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBZBggrBgEFBQcBBwEB/wRKMEgwRgQCAAEwQAMEA7Hh2AME
ALvzdAMEAshc3AMEAshc6DAMAwQCyF7kAwQByF7sMAwDBALJhIQDBAPJhJADBALJ
hJwDBAPJpDAwDQYJKoZIhvcNAQELBQADggEBAFHrZvxJXOHTkP4Rs72bZEnGFHhz
0UFPx3EZ1JdlZd18XZvOUd/acDqIDWUoQ8epwfST8cpN/DRZtJLuazRMxnt1zKBT
vKjvbbag70aXoCjoaEW458Obv3RLCFyV68VAJsxS63+3MCoUAAtgb9gLdFfBzK1r
ciGzqPek6vKARIYTL+jhXEJVEcNFIJfOhBejG/ud9piFgT0kTJo5JVerqiyTkgYS
dxCYVB+T30lLisp/7wOa7vXftUEknBLlBPuk/PArRsouq49V0dS72gQbcMJ6U1Mp
pIBxw/w0MdqTe/xKHIySIUAhi0l9pkDUyUBzYgtrmn85t2tmg3WDXV6T7NM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:03 2024 by rpki-client on console-fra.rpki-client.org